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Amendment to the Claims : 

This listing of claims replaces all prior versions, and 
listing©, of claims in the application; 

1. (Previously Presented) A method comprising: 
generating information, at first and second points of a 

network, about unwanted communications passing through the first 
and second points from a source and directed to a target device, 
the unwanted communications being adapted to reduce the ability 
of the target device to respond to other communications; and 

analyzing the information generated at the first and second 
points to identify which of the points first carried the 
unwanted communicat ions - 

2. (Original) The method of claim 1, also including 
detecting the direction of the unwanted communications. 

3. (Original) The method of claim 1, also including 
identifying the target device. 

4. (Original) The method of claim 1, also including 
statistically analyzing the communications to determine if an 
uncharacteristically large number of communications have passed 
through at least one of the network points . 
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5. (Original) The method of claim 1, also including 
statistically analyzing the communications to determine when an 
uncharacteristically large number of communications have been 
targeted toward the target device. 

6. (Original) The method of claim 1, also including 
correlating communications request messages with acknowledgement 
messages . 

7. (Original) The method of claim 1, also including 
communicating information about the unwanted communications to 
brokers . 

8. (Original) The method of claim 7, also including 
communicating information about the unwanted communications 
among brokers . 

9. (Original) The method of claim 1, also including 
blocking a portion of communications passing through the point 
through which the unwanted communications originated. 

10. (Original) The method of claim 9 t also including 
blocking a portion of communication request messages passing 
through the point through which the unwanted communications 
originated. 
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11. (Original) The method of claim 1, in which the target 
device comprises a web server. 

12. (Previously Presented) A method comprising: 
monitoring communications passing through at least a first 

point and a second point on a path from a source sub-network to 
a target device; 

analyzing the communications passing through the first and 
second points for indicia of unwanted communications ; 

identifying the source sub-network, as originating unwanted 
communications that are adapted to reduce the ability of a 
target device on a network to respond to other communications/ 
the source sub-network connected to the network through an 
interface device associated with the first of the at least a 
first point and a second point that carried the unwanted 
communications; and 

blocking communications passing through the interface 
device. 

13. (Original) The method of claim 12, also including 
blocking a portion of the communications passing through the 
interface device. 

14. (Original) The method of claim 13, also including 
blocking a portion of communication request messages passing 
through the interface device. 
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15 . (Canceled) , 

16 . (Canceled) , 

17. (Previously Presented) The method of claim 12, also 
including statistically analyzing the communications passing 
through the first and second points for an uncharacteristically 
large number of communications passing through either point, 

18. (Previously Presented) The method of claim 12, also 
including statistically analyzing the communications passing 
through the first and second points for an uncharacteristically 
large number of communication request messages passing through 
either point, 

19. (Previously Presented) The method of claim 12, also 
including correlating communication request messages passing 
though the first and second points with acknowledgement 
messages . 

20. (Previously Presented) A system comprising: 
first and second interface devices for detecting and 

generating information about unwanted communications from a 
source passing through the first and second interface devices 
directed to a target device; and 

a communications analyzer for analyzing the information 
generated at the first and second interface devices to identify 
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which of the interface devices first carried the unwanted 
communications . 

21. (Original) The system of claim 20, in which the 
communications analyzer also includes: 

an interface monitor corresponding to each interface 
device; and 

a communications link between the interface monitors. 

22. (Original) The system of claim 21 , in which the 
communications analyzer also includes a statistics analyzer 
corresponding to each interface device for statistically 
analyzing the messages that pass through each interface device. 

23. (Original) The system of claim 22, also including an 
interface coordinator associated with each interface device for 
instructing the interface devices to block messages. 

24. (Previously Presented) A system comprising: 

a communications monitor for detecting and generating 
information about unwanted messages originating on a first 
network and directed to a target device on a second network, the 
communications monitor comprising: 
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a plurality of interface monitors between the first 
network and the second network for monitoring the passage of 
unwanted messages therethrough; 

a localizer coupled to the plurality of interface 
monitors to identify the network point that first carried the 
unwanted messages; and 

a gating module for blocking messages passing through the 
network point identified by the localizer from the first network 
to the second network. 

25 . (Canceled) . 

26 . (Canceled) „ 

27. (Previously Presented) The system of claim 24, in 
which the communications monitor also includes a statistics 
analyzer for statistically analyzing the messages passing 
through the plurality of points , 

28. (Original) The system of claim 24, in which the gating 
module is operable to block a portion of the messages passing 
from the first network to the second network. 

29. (Original) The system of claim 28, in which the gating 
module is operable to block a percentage of all messages passing 
from the first network to the second network. 
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30. (Original) The system of claim 28, in which the gating 
module is operable to block a portion of communication request 
messages directed to the target device. 

31. (Previously Presented) A computer program embodied in 
a computer readable medium, the program capable of configuring a 
computer to: 

generate inf ormaticn, at first and second points of a 
network, about unwanted communications from a source passing 
through the first and second points directed to a target device 
that are adapted to reduce the ability of the target device to 
respond to other communications; and 

analyze the information generated at the first and second 
points to identify which of the points first carried the 
unwanted communications. 

32. (Original) The program of claim 31, also capable of 
configuring a computer to block a portion of the communications 
passing through the point that first carried the unwanted 
communications . 

33. (Currently Amended) A computer program embodied in a 
computer- readable medium carrier wave , the program capable of 
configuring a computer to: 

generate information, at first and second points of a 
network, about unwanted communications from a source passing 
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through the first and second points directed to a target device 
that are adapted to reduce the ability of the target device to 
respond to other communications / and 

analyze the inf ormation generated at the first and second 
points to identify which of the points first carried the 
unwanted communications . 

34. (Original) The program of claim 33, also capable of 
configuring a computer to block a portion of the communications 
passing through the point that first carried the unwanted 
communications _ 
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